{ "opencollection": "1.0.0", "info": { "name": "OpenTextâ„¢ Core Application Security Web API Explorer ApiKeyManagement Vulnerabilities API", "version": "v3" }, "items": [ { "info": { "name": "Vulnerabilities", "type": "folder" }, "items": [ { "info": { "name": "Returns a list of vulnerabilities", "type": "http" }, "http": { "method": "GET", "url": "{{baseUrl}}/api/v3/releases/:releaseId/vulnerabilities", "params": [ { "name": "releaseId", "value": "", "type": "path", "description": "The release id" }, { "name": "filters", "value": "", "type": "query", "description": "A delimited list of field filters.\r\n

Field name and value should be separated by a colon (:).\r\n

Multiple fields should be separated by a plus (+). Multiple fields are treated as an AND condition. Example, fieldname1:value+fieldname2:value\r\n

Multiple values for a field should be separated by a pipe (|). Mulitple values for a field are treated as an OR condition. Example, fieldname1:value1|value2\r\n

Filtering is not supported for the following fields: auditPendingAuditorStatus, auditPendingSuppression, checkId, closedDate, closedStatus, falsePositiveChallenge, instanceId, pci1_2, sink, source, stig6, suppressedBy, timeToFixDays" }, { "name": "orderBy", "value": "", "type": "query", "description": "The field name to order the results by." }, { "name": "orderByDirection", "value": "", "type": "query", "description": "The direction to order the results by. ASC and DESC are valid values." }, { "name": "fields", "value": "", "type": "query", "description": "Comma separated list of fields to return." }, { "name": "offset", "value": "", "type": "query", "description": "Offset of the starting record. 0 indicates the first record." }, { "name": "limit", "value": "", "type": "query", "description": "Maximum records to return. The maximum value allowed is in Tenant's 'Max Number of Vulnerabilities Records Per API Call'." }, { "name": "excludeFilters", "value": "", "type": "query", "description": "Indicates if filter data should be excluded in the return value. Value defaults to false if not specified." }, { "name": "includeFixed", "value": "", "type": "query", "description": "Indicates if items that have been fixed should be included in the return value. Value defaults to false if not specified." }, { "name": "includeSuppressed", "value": "", "type": "query", "description": "Indicates if items that have been suppressed should be included in the return value. Value defaults to false if not specified." }, { "name": "fortifyAviator", "value": "", "type": "query", "description": "Indicates if SAST Aviator audited items should be included in the return value. Value defaults to null if not specified." }, { "name": "keywordSearch", "value": "", "type": "query", "description": "Used for keyword searches" }, { "name": "lastModifiedDate", "value": "", "type": "query", "description": "Indicates the last modified date of the vulnerability. The format of the date is YYYY/MM/DD." } ] }, "docs": "Allowed Scopes: api-tenant, view-issues" }, { "info": { "name": "Returns all of the data for the vulnerability", "type": "http" }, "http": { "method": "GET", "url": "{{baseUrl}}/api/v3/releases/:releaseId/vulnerabilities/:vulnId/all-data", "params": [ { "name": "releaseId", "value": "", "type": "path", "description": "The release id" }, { "name": "vulnId", "value": "", "type": "path", "description": "Field accepts \"id\" or \"vulnId\". To obtain the vulnId or Id call GET /api/v3/vulnerabilities. Id is also available through portal." }, { "name": "includeSystemEvents", "value": "", "type": "query", "description": "Include system events in the return data. Value defaults to false if not specified." } ] }, "docs": "Allowed Scopes: api-tenant, view-issues" }, { "info": { "name": "Returns the vulnerability summary", "type": "http" }, "http": { "method": "GET", "url": "{{baseUrl}}/api/v3/releases/:releaseId/vulnerabilities/:vulnId/summary", "params": [ { "name": "releaseId", "value": "", "type": "path", "description": "The release id" }, { "name": "vulnId", "value": "", "type": "path", "description": "Field accepts \"id\" or \"vulnId\". To obtain the vulnId or Id call GET /api/v3/vulnerabilities. Id is also available through portal." } ] }, "docs": "Allowed Scopes: api-tenant, view-issues" }, { "info": { "name": "Returns the vulnerability details", "type": "http" }, "http": { "method": "GET", "url": "{{baseUrl}}/api/v3/releases/:releaseId/vulnerabilities/:vulnId/details", "params": [ { "name": "releaseId", "value": "", "type": "path", "description": "The release id" }, { "name": "vulnId", "value": "", "type": "path", "description": "Field accepts \"id\" or \"vulnId\". To obtain the vulnId or Id call GET /api/v3/vulnerabilities. Id is also available through portal." } ] }, "docs": "Allowed Scopes: api-tenant, view-issues" }, { "info": { "name": "Returns the vulnerability recommendations", "type": "http" }, "http": { "method": "GET", "url": "{{baseUrl}}/api/v3/releases/:releaseId/vulnerabilities/:vulnId/recommendations", "params": [ { "name": "releaseId", "value": "", "type": "path", "description": "The release id" }, { "name": "vulnId", "value": "", "type": "path", "description": "Field accepts \"id\" or \"vulnId\". To obtain the vulnId or Id call GET /api/v3/vulnerabilities. Id is also available through portal." } ] }, "docs": "Allowed Scopes: api-tenant, view-issues" }, { "info": { "name": "Returns the vulnerability history", "type": "http" }, "http": { "method": "GET", "url": "{{baseUrl}}/api/v3/releases/:releaseId/vulnerabilities/:vulnId/history", "params": [ { "name": "releaseId", "value": "", "type": "path", "description": "The release id" }, { "name": "vulnId", "value": "", "type": "path", "description": "Field accepts \"id\" or \"vulnId\". To obtain the vulnId or Id call GET /api/v3/vulnerabilities. Id is also available through portal." }, { "name": "includeSystemEvents", "value": "", "type": "query", "description": "Include system events in the return data. Value defaults to false if not specified." } ] }, "docs": "Allowed Scopes: api-tenant, view-issues" }, { "info": { "name": "Returns the vulnerability screenshots", "type": "http" }, "http": { "method": "GET", "url": "{{baseUrl}}/api/v3/releases/:releaseId/vulnerabilities/:vulnId/screenshots", "params": [ { "name": "releaseId", "value": "", "type": "path", "description": "The release id" }, { "name": "vulnId", "value": "", "type": "path", "description": "Field accepts \"id\" or \"vulnId\". To obtain the vulnId or Id call GET /api/v3/vulnerabilities. Id is also available through portal." } ] }, "docs": "Allowed Scopes: api-tenant, view-issues" }, { "info": { "name": "Returns a screenshot", "type": "http" }, "http": { "method": "GET", "url": "{{baseUrl}}/api/v3/releases/:releaseId/vulnerabilities/:vulnId/screenshot/:screenshotId", "params": [ { "name": "releaseId", "value": "", "type": "path", "description": "The release id" }, { "name": "vulnId", "value": "", "type": "path", "description": "Field accepts \"id\" or \"vulnId\". To obtain the vulnId or Id call GET /api/v3/vulnerabilities. Id is also available through portal." }, { "name": "screenshotId", "value": "", "type": "path", "description": "The screenshot id" } ] }, "docs": "Allowed Scopes: api-tenant, view-issues" }, { "info": { "name": "Returns the vulnerability request and response", "type": "http" }, "http": { "method": "GET", "url": "{{baseUrl}}/api/v3/releases/:releaseId/vulnerabilities/:vulnId/request-response", "params": [ { "name": "releaseId", "value": "", "type": "path", "description": "The release id" }, { "name": "vulnId", "value": "", "type": "path", "description": "Field accepts \"id\" or \"vulnId\". To obtain the vulnId or Id call GET /api/v3/vulnerabilities. Id is also available through portal." } ] }, "docs": "Allowed Scopes: api-tenant, view-issues" }, { "info": { "name": "Returns the vulnerability headers", "type": "http" }, "http": { "method": "GET", "url": "{{baseUrl}}/api/v3/releases/:releaseId/vulnerabilities/:vulnId/headers", "params": [ { "name": "releaseId", "value": "", "type": "path", "description": "The release id" }, { "name": "vulnId", "value": "", "type": "path", "description": "Field accepts \"id\" or \"vulnId\". To obtain the vulnId or Id call GET /api/v3/vulnerabilities. Id is also available through portal." } ] }, "docs": "Allowed Scopes: api-tenant, view-issues" }, { "info": { "name": "Returns the vulnerability parameters", "type": "http" }, "http": { "method": "GET", "url": "{{baseUrl}}/api/v3/releases/:releaseId/vulnerabilities/:vulnId/parameters", "params": [ { "name": "releaseId", "value": "", "type": "path", "description": "The release id" }, { "name": "vulnId", "value": "", "type": "path", "description": "Field accepts \"id\" or \"vulnId\". To obtain the vulnId or Id call GET /api/v3/vulnerabilities. Id is also available through portal." } ] }, "docs": "Allowed Scopes: api-tenant, view-issues" }, { "info": { "name": "Returns the vulnerability traces", "type": "http" }, "http": { "method": "GET", "url": "{{baseUrl}}/api/v3/releases/:releaseId/vulnerabilities/:vulnId/traces", "params": [ { "name": "releaseId", "value": "", "type": "path", "description": "The release id" }, { "name": "vulnId", "value": "", "type": "path", "description": "Field accepts \"id\" or \"vulnId\". To obtain the vulnId or Id call GET /api/v3/vulnerabilities. Id is also available through portal." } ] }, "docs": "Allowed Scopes: api-tenant, view-issues" }, { "info": { "name": "Returns the trace code for the specific index", "type": "http" }, "http": { "method": "GET", "url": "{{baseUrl}}/api/v3/releases/:releaseId/vulnerabilities/:vulnId/traces/:traceIndex/:traceEntryIndex/code", "params": [ { "name": "releaseId", "value": "", "type": "path", "description": "The release id" }, { "name": "vulnId", "value": "", "type": "path", "description": "Field accepts \"id\" or \"vulnId\". To obtain the vulnId or Id call GET /api/v3/vulnerabilities. Id is also available through portal." }, { "name": "traceIndex", "value": "", "type": "path", "description": "The trace index can be obtained by calling GET/api/v3/releases/{releaseId}/vulnerabilities/{vulnId}/all-data" }, { "name": "traceEntryIndex", "value": "", "type": "path", "description": "The trace entry index can be obtained by calling GET/api/v3/releases/{releaseId}/vulnerabilities/{vulnId}/all-data" } ] }, "docs": "Allowed Scopes: api-tenant, view-issues" }, { "info": { "name": "Returns the trace snippet for the specific index", "type": "http" }, "http": { "method": "GET", "url": "{{baseUrl}}/api/v3/releases/:releaseId/vulnerabilities/:vulnId/traces/:traceIndex/:traceEntryIndex/snippet", "params": [ { "name": "releaseId", "value": "", "type": "path", "description": "The release id" }, { "name": "vulnId", "value": "", "type": "path", "description": "Field accepts \"id\" or \"vulnId\". To obtain the vulnId or Id call GET /api/v3/vulnerabilities. Id is also available through portal." }, { "name": "traceIndex", "value": "", "type": "path", "description": "The trace index can be obtained by calling GET/api/v3/releases/{releaseId}/vulnerabilities/{vulnId}/all-data" }, { "name": "traceEntryIndex", "value": "", "type": "path", "description": "The trace entry index can be obtained by calling GET/api/v3/releases/{releaseId}/vulnerabilities/{vulnId}/all-data" } ] }, "docs": "Allowed Scopes: api-tenant, view-issues" }, { "info": { "name": "Returns the vulnerability audit options", "type": "http" }, "http": { "method": "GET", "url": "{{baseUrl}}/api/v3/releases/:releaseId/vulnerabilities/:vulnId/audit-options", "params": [ { "name": "releaseId", "value": "", "type": "path", "description": "The release id" }, { "name": "vulnId", "value": "", "type": "path", "description": "Field accepts \"id\" or \"vulnId\". To obtain the vulnId or Id call GET /api/v3/vulnerabilities. Id is also available through portal." } ] }, "docs": "Allowed Scopes: api-tenant, view-issues" }, { "info": { "name": "Saves audit data for the vulnerabilities", "type": "http" }, "http": { "method": "POST", "url": "{{baseUrl}}/api/v3/releases/:releaseId/vulnerabilities/bulk-edit", "params": [ { "name": "releaseId", "value": "", "type": "path", "description": "The release id" } ] }, "docs": "Allowed Scopes: api-tenant, manage-issues" }, { "info": { "name": "Get available vulnerability filters", "type": "http" }, "http": { "method": "GET", "url": "{{baseUrl}}/api/v3/releases/:releaseId/vulnerability-filters", "params": [ { "name": "releaseId", "value": "", "type": "path", "description": "The release id" }, { "name": "filters", "value": "", "type": "query", "description": "A delimited list of field filters.\r\n

Field name and value should be separated by a colon (:).\r\n

Multiple fields should be separated by a plus (+). Multiple fields are treated as an AND condition. Example, fieldname1:value+fieldname2:value\r\n

Multiple values for a field should be separated by a pipe (|). Mulitple values for a field are treated as an OR condition. Example, fieldname1:value1|value2\r\n

Filtering is not supported for the following fields: auditPendingAuditorStatus, auditPendingSuppression, checkId, closedDate, closedStatus, falsePositiveChallenge, instanceId, pci1_2, sink, source, stig6, suppressedBy, timeToFixDays" }, { "name": "fieldName", "value": "", "type": "query", "description": "The specific field to return" }, { "name": "includeFixed", "value": "", "type": "query", "description": "Indicates if items that have been fixed should be included in the return value. Value defaults to false if not specified." }, { "name": "includeSuppressed", "value": "", "type": "query", "description": "Indicates if items that have been suppressed should be included in the return value. Value defaults to false if not specified." }, { "name": "keywordSearch", "value": "", "type": "query", "description": "Used for keyword searches" }, { "name": "fields", "value": "", "type": "query", "description": "Comma separated list of fields to return." } ] }, "docs": "Allowed Scopes: api-tenant, view-issues" }, { "info": { "name": "Saves bug tracker url for the vulnerabilities", "type": "http" }, "http": { "method": "POST", "url": "{{baseUrl}}/api/v3/releases/:releaseId/vulnerabilities/bug-link", "params": [ { "name": "releaseId", "value": "", "type": "path", "description": "The release id" } ] }, "docs": "Allowed Scopes: api-tenant, manage-issues" }, { "info": { "name": "Returns the vulnerability audit comments", "type": "http" }, "http": { "method": "GET", "url": "{{baseUrl}}/api/v3/releases/:releaseId/vulnerabilities/:vulnId/comments", "params": [ { "name": "releaseId", "value": "", "type": "path", "description": "The release id" }, { "name": "vulnId", "value": "", "type": "path", "description": "Field accepts \"id\" or \"vulnId\". To obtain the vulnId or Id call GET /api/v3/vulnerabilities. Id is also available through portal." }, { "name": "userName", "value": "", "type": "query", "description": "The username to get user specific comments" } ] }, "docs": "Allowed Scopes: api-tenant, view-issues" }, { "info": { "name": "Returns machine readable aviator remediation details in json format for each individual issue", "type": "http" }, "http": { "method": "GET", "url": "{{baseUrl}}/api/v3/releases/:releaseId/vulnerabilities/:vulnId/aviator-remediation-guidance", "params": [ { "name": "releaseId", "value": "", "type": "path", "description": "The release id" }, { "name": "vulnId", "value": "", "type": "path", "description": "Field accepts \"id\" or \"vulnId\". To obtain the vulnId or Id call GET /api/v3/vulnerabilities. Id is also available through portal." } ] }, "docs": "Returns machine readable aviator remediation details in json format for each individual issue" } ] } ], "bundled": true }